FBI Probes Which Ransom Notes In Nancy Guthrie Kidnapping Are Real
The FBI said Wednesday it is investigating which ransom notes in the Tucson kidnapping of Nancy Guthrie are authentic, calling some messages fake extortion attempts while other notes remain under review.[1]
Officials said the case continues to be treated as a kidnapping for ransom.[1] TMZ founder Harvey Levin told investigators he forwarded about a dozen messages, including one seeking 1 bitcoin, and the FBI said the sender in that thread might be female.[1]
On January 31, 2026, Nancy Guthrie, 84, was last seen after being dropped off at her Tucson home following a family dinner.[1] She was reported missing the next day, and investigators say she was abducted from the home without her phone or medications.[1] On February 2, a ransom note first demanded $4 million in bitcoin and later raised the demand to $6 million.[1] Investigators said that first note included house-specific details — such as the placement of Guthrie's Apple Watch next to her bed and a burned-out back-porch floodlight — which led them to take it seriously.[1]
A second note on February 6 came from the same IP address and claimed Guthrie had died; Savannah Guthrie and her siblings posted a recorded message saying they would pay, but no further replies came from the sender.[1] The FBI said on July 1 that some ransom messages have been deemed illegitimate extortion attempts while others may be legitimate and remain under investigation, and digital forensics in the case is ongoing.[1]
The mainstream summary does not mention that ransom kidnappings are among the least common types of hostage situations in the United States, with specific annual counts for ransom-only cases not publicly available from the FBI or DOJ. This context is crucial, as it highlights the rarity of such incidents and may shape public perception of the severity and urgency of the Guthrie case. Additionally, from June 2020 to June 2025, women aged 80 or older accounted for fewer than 0.2% of reported kidnapping or abduction victims, suggesting that the circumstances surrounding Nancy Guthrie's disappearance are particularly unusual and noteworthy within national crime trends. This detail underscores the significance of her case amidst a broader landscape of crime, which the mainstream coverage does not address directly.
While the summary emphasizes the legitimacy of some ransom notes, it lacks insight into the broader phenomenon of opportunistic extortion scams and virtual kidnapping tactics that have emerged in recent years. Experts note that modern incidents often involve rapid financial gain through coercion, reflecting a troubling trend that could inform the motivations behind the ransom demands in Guthrie's case. Furthermore, the prevalence of hoax communications in high-profile investigations, which can drain law enforcement resources, is another angle that the mainstream account overlooks, potentially obscuring the complexities faced by investigators in discerning genuine threats from fraudulent attempts.
Show source details & analysis (1 source)
📊 Relevant Data
Ransom kidnappings are the least common type of hostage situation in the United States, and publicly available FBI and DOJ data do not provide specific annual counts for ransom-only cases.
Fact Check Team: How common are ransom cases & the most high-profile to date? — The National Desk / AP
From June 2020 to June 2025, women in their 80s or older accounted for fewer than 0.2% of the roughly 240,000 reported kidnapping or abduction victims in FBI crime data.
Shocking and strange: Experts compare Nancy Guthrie's case to other missing persons — WHQR
📌 Key Facts
- On February 2, 2026, one day after Nancy Guthrie was reported missing from her Tucson home, a ransom note demanding $4 million in bitcoin was sent via tip lines to two local stations and TMZ, later increasing the demand to $6 million.
- Investigators say that first note included house-specific details, such as the placement of Guthrie's Apple Watch with a white band on the floor next to her bed and a burned-out back-porch floodlight, leading them to take it seriously.
- A second note on February 6, 2026, came from the same IP address and claimed Guthrie had died; Savannah Guthrie and her siblings responded with a recorded message saying they would pay, but no further replies came from the sender.
- The FBI told CBS News on July 1, 2026, that some ransom messages have been deemed illegitimate extortion attempts, while others may be legitimate and remain under investigation, and that the case continues to be treated as a kidnapping for ransom.
- TMZ founder Harvey Levin said he has forwarded about a dozen additional messages, including one seeking 1 bitcoin (about $60,000) for information on the kidnappers, and that the FBI suggested the sender in that thread might be female.
📰 Source Timeline (1)
Follow how coverage of this story developed over time